CLAIMS 



Kindly amend the claims as follows. 
1-28. (canceled) 

29. (currently amended) A method for the initialization of mobile data carriers (IM) with assigned 
decentralized read and write stations (WR) and/or of decentralized read and write stations (WR) within 
the frame of an authorization system (A), wherein initialization data (DI, A-I, I-I) are generated in an 
authorization process in a secure environment (g) at an- remote authorization authority (HA) by means 
of authorization means (AM) 

and said initialization data are sent over a network (N) in a secure communication according to 
security rules corresponding to the authorization system 

to a decentralized authorized read and write station (A-WR) 

where the mobile data carriers (IM) are initialized (IMj) with the initialization data (DI) 

and/or that the initialization data (DI) are sent over the network (N) to a decentralized read and 
write station (WR), by means of which the read and write station is initialized (WRk). 

30. (previously amended) The method according to claim 29, wherein the authorization authority 
(HA) is formed by a host computer (H) or by a remote authorization read and write station (R-A-WR). 

3 1 . (previously amended) The method according to claim 29, wherein the authorization means 
(AM) are consisting of special authorization identification media (AM-IM) or of authorization data 
(AM-I). 

32. (previously amended) The method according to claim 29, wherein a (non-authorized) 
decentralized read and write station (WR) at first is transformed into an authorized read and write 
station (A-WR) by means of function authorization data (A-I-FA) which are contained in the 
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initialization data (DI), and which subsequently is capable of initializing mobile data carriers (IM) in 
correspondence with the initialization data. 

33. (previously amended) The method according to claim 29, wherein within the frame of the 
authorization system (A) several authorization authorities (HAi) with the same and/or with differing 
authorization levels (OLi) are provided. 

34. (previously amended) The method according to claim 29, wherein several authorization means 
(AMi) with the same and/or with differing authorization levels (OLi) are provided. 

35. (previously amended) The method according to claim 29, wherein initialization data (DI, A-I, 
I-I) are sent to the authorized read and write stations (A-WR), or to the decentralized read and write 
stations (WR) through more than one network level (Nl, N2) and/or through more than one 
authorization authority (HA1,HA2). 

36. (previously amended) The method according to claim 29, wherein the initialization data (DI) 
are sent over a secure private network (Np). 

37. (previously amended) The method according to claim 29, wherein the initialization data are 
sent over an open public network (No) with an encryption and security gates on both sides (Gl, G2). 

38. (previously amended) The method according to claim 29, wherein with the initialization data 
(DI2.2) application extensions (App2.2) are initialized. 

39. (previously amended) The method according to claim 29, wherein with the initialization data 
(DI3) new independent applications (App3) are initialized. 

40. (previously amended) The method according to claim 29, wherein in a blank mobile data 
carrier which is prepared with a system data field (CDF) applications (App) are newly initialized with 
the initialization data (DI). 
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41. (previously amended) The method according to claim 29, wherein a permanent connection 
over the network (N) is made between the authorization authority (HA) and the decentralized read and 
write station (A-WR, WR). 

42. (previously amended) The method according to claim 29, wherein a connection between the 
authorization authority (HA) and the decentralized read and write stations (A-WR, WR) over the 
network (N) is only made occasionally and when an exchange of data takes place. 

43. (previously amended) The method according to claim 29, wherein for the initialization a user 
authorization (aw) is effected by the read and write station (A-WR, WR), or by its owner (12) or an 
identification authorization means (ID-AM) is required. 

44. (previously amended) The method according to claim 29, wherein for an initialization a user 
authorization (ai) by the data carrieror by the owner (13) of the data carrier takes place. 

45. (previously amended) The method according to claim 29, wherein for the authorization of 
initializations over the network (N), as well as for the execution of applications at the read and write 
station (A-WR, WR), at the data carrier (IM) personal data (aw) of the owner of the read and write 
station or personal data (ai) of the owner of the data carrier, are used as authorization means. 

46. (previously amended) The method according to claim 29, wherein the mobile data carriers (IM) 
comprise an application micro-processor (AppuP) for the processing of application program data (I-I- 
Cod). 

47. (previously amended) The method according to claim 29, wherein the data carriers (IM) are 
designed as contact-less, active or passive identification media. 

48. (previously amended) The method according to claim 29, wherein the mobile data carriers (IM), 
authorization identification media (AM-IM) and identification authorization media (ID-AM) are 
formed by the same mobile data carriers. 
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49. (previously amended) The method according to claim 29, wherein status informations (S-I) 
concerning events at the authorized, or at the decentralized read and write stations (A-WR, WR) and/or 
at the mobile data carriers (IM) are sent to a corresponding authorization authority (HA) over the 
network (N). 

50. (previously amended) The method according to claim 49, wherein the status informations (S-I) 
are utilized for usage or license fee debiting. 

5 1 . (previously amended) The method according to claim 29, wherein every new initialization of a 
data carrier (IM) for the purpose of debiting a usage or licence fee is sent to the authorization authority 
(HA) over the network (N). 

52. (previously amended) The method according to claim 29, wherein every usage of an 
application at a decentralized read and write station (WR) for the purpose of debiting a usage or license 
fee is sent to the authorization authority (HA) over the network (N). 

53. (previously amended) The method according to claim 29, wherein a multi-level initialization of 
the data carriers (IM) over networks (N) is provided, which is effected in hierarchically graduated steps 
within the frame of the authorization system (A). 

54-56. (canceled) 

57. (currently amended) A mobile data carrier (IMj) for the communication with assigned 
decentralized read and write stations (WR, Wrk) 

within the frame of an authorization system (A), said mobile data carrier comprising 
initialization data (DI, A-I, I-I), 

wherein said initialization data (DI, A-I, I-I) are generated in an authorization process in a 
secure environment (g) at an remote authorization authority (HA) by means of authorization 
means (AM) 
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and said initialization data are sent over a network (N) in a secure communication according to 
security rules corresponding to the authorization system (A) 

to a decentralized authorized read and write station (A-WR) 

where the mobile data carrier is initialized (IMj) with the initialization data. 

58. (currently amended) A read and write station (WRk) for the communication with assigned 
mobile data carriers (IM, IMj) within the frame of an remote authorization system (A), said read 
and write station comprising initialization data (DI, A-I, I-I) 

wherein said initialization data (DI, A-I, I-I) are generated in an authorization process in a 
secure environment (g) at an authorization authority (HA) by means of authorization means 
(AM) 

and said initialization data are sent over a network (N) in a secure communication according to 
security rules corresponding to the authorization system (A) 

to a decentralized read and write station (WR) 

by means of which the read and write station is initialized (WRk). 
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